19% Of iOS Apps Access Your Address Book Without Your Permission... Until iOS 6 [Report]
Antivirus software specialist Bitdefender has found that nearly 19% of iOS apps access your address book without your knowledge — or your consent — when you're using them, and 41% track your location.
Context & Ripple Effects
The report lands mid-arc: in February 2012 Apple acknowledged a loophole giving developers access to users' photo libraries, then announced on February 15 that app access to contact data would require explicit user permission going forward. Bitdefender's numbers are the first broad quantification of what that promise was responding to — nearly 19% of iOS apps reading the address book without consent, and 41% tracking location.
First-order effects
- Apps that currently read contacts silently face a hard change under iOS 6's confirmed permission controls: every address-book call now needs an explicit user prompt, and developers whose value depends on contact uploads must either ask and risk refusal or rework their onboarding.
- Users get visibility they never had — the consent dialog turns an invisible data flow into an accept/decline decision at first launch.
Second-order effects
- Social and messaging apps are pushed toward justifying contact access inside the prompt itself, since a bare request against a silent default means measurable opt-out rates; Apple's review process becomes the enforcement point rather than developer policy pages.
- Security vendors gain a new audit franchise — Bitdefender's methodology (scanning apps for undisclosed data access) is a repeatable product angle now that the platform exposes what to test.
Third-order effects
- If the pattern holds, mobile OS permissioning consolidates around the platform vendor as de facto privacy regulator, with third-party researchers supplying the measurement layer the app stores don't publish themselves.
The trend: Mobile platforms are shifting from developer-discretion data access to explicit per-capability consent, with independent security research setting the disclosure agenda.